The original bug report referenced issues in both nss and openldap. At the time the bug was created I wasn't sure which component was at fault or both. At this point it seems clear both nss and openldap have issues that need fixing. Therefore I cloned the nss bug to openldap so the issues could be tracked and managed separately.
I already cloned this as bug #808464. The patch was submitted upstream, I'm waiting for the response. *** This bug has been marked as a duplicate of bug 808464 ***